Privacy Policy
1. Controller and contact
The controller for the processing by Printchen described here is Stuart Acklam, Ehestorfer Heuweg 74A, 21149 Hamburg, Germany. You can contact us at stuart@printchen.com or +49 40 41167116, including for privacy requests.
2. Account and sign-in
We need your email address for your account. Email one-time-code sign-in processes your address, code verification data and session information. You do not create a Printchen customer password. Sign-in is needed to associate saved designs, your wallet, unlocks and your own files with your account.
If Google sign-in is offered on the sign-in page and you choose it, Printchen receives your verified email address, a Google identifier and, where supplied, your profile name. Authentication is implemented using Auth.js. A sender name is needed for gifts and can optionally be saved.
Account-related processing provides the functions you request and performs the contract (Article 6(1)(b) GDPR). These account functions cannot be provided without the required information.
3. Designs, wallet and purchases
Printchen processes saved designs, including entered text and selected design values, revisions, unlocks and associated file access. This enables saving, continuing your work and downloading unlocked revisions again.
The wallet processes credit movements and their associations with purchases, gifts and unlocks. Purchase data includes purchase and transaction references, amounts, status and account association. This serves contract performance (Article 6(1)(b) GDPR); legally required records are based on Article 6(1)(c) GDPR.
4. Paddle
Purchases are handled through Paddle. Paddle processes the information needed for checkout, payment, taxes and receipts under its own privacy notice. Printchen receives purchase and payment-status information to associate !CHEN with your account. The Paddle contracting party and notices identified at checkout apply to that process.
5. Technical operation and security
The application is hosted on Vercel; application data uses a PostgreSQL database at Neon. Technically necessary connection and request data is processed when you visit the website so that pages can be delivered.
Printchen limits code requests and sign-in attempts to protect authentication. Protected verification values derived from an IP address or email address, and attempt counters, are processed for this purpose. The purpose is protection against misuse and unauthorised access (legitimate interest under Article 6(1)(f) GDPR).
7. Emails and gifts
The application uses Resend for email sign-in codes and gift emails. Addresses and message contents needed for delivery are processed. For gifts, these include the recipient address, sender name, sender address and any personal message added.
Service emails support the sign-in or gift process you request (Article 6(1)(b) GDPR). If you contact support, we process your message and contact details to address your enquiry; depending on the enquiry, this serves contract performance or our legitimate interest in answering enquiries.
9. Optional marketing
A marketing subscription is not yet set up in this version. The intended model is an optional sign-up, not selected in advance, followed by email confirmation (double opt-in). Any future consent may be withdrawn at any time for the future, in particular through an unsubscribe link; withdrawal does not affect the lawfulness of earlier processing.
Printchen is the intended sender. Content may concern Printchen, 11bar3d and the operator’s Etsy shop. The subscriber list is not intended to be passed to Etsy or other marketers for their own advertising. Future marketing processing requires your consent (Article 6(1)(a) GDPR).
10. Deletion and retention
You can request access or deletion at stuart@printchen.com. If your account still contains !CHEN, support will discuss how to handle the credit and existing claims with you. This implies neither automatic forfeiture of credit nor an additional general refund promise. Privacy requests are handled independently of that discussion.
Account deletion may end access to saved designs and repeat downloads through the account. Statutory retention duties and the assessment of existing claims may prevent immediate deletion of particular data. Deleting a saved design is not the same as deleting an account.
11. Your rights
Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. You may object to direct marketing at any time.
You may withdraw consent at any time for the future. You also have the right to complain to a data protection supervisory authority. To exercise your rights, contact stuart@printchen.com; where necessary, we will verify your identity to avoid disclosing data to unauthorised people.
12. Subscription and licence data
We store the Paddle customer and subscription association, plan, paid periods, payment status, cancellation date, accepted plan version, credit movements and unlocks. These records support contract performance, commercial access and refund handling. Paddle processes payment data under its own privacy notice.